Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/k2RsgnNATRdsZby8HZxnGhKnANs.roa
File: k2RsgnNATRdsZby8HZxnGhKnANs.roa (raw, json)
Hash identifier: 76bn38GnHIBhsZiOIgIibibZGV42Ok2NhN+2GBLOKFk=
Subject key identifier: 93:64:6C:82:73:40:4D:17:6C:65:BC:BC:1D:9C:67:1A:12:A7:00:DB
Certificate issuer: /CN=ae52db82090b343f89f7c637cf41a94bcfd4346a
Certificate serial: 0199E409E974FF5578CC28E10278E4A6E558
Authority key identifier: AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/k2RsgnNATRdsZby8HZxnGhKnANs.roa
Signing time: Tue 14 Oct 2025 18:44:38 +0000
ROA not before: Tue 14 Oct 2025 18:44:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213093
IP address blocks: 185.184.62.0/24 maxlen: 24
185.184.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e4:09:e9:74:ff:55:78:cc:28:e1:02:78:e4:a6:e5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae52db82090b343f89f7c637cf41a94bcfd4346a
Validity
Not Before: Oct 14 18:44:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93646c8273404d176c65bcbc1d9c671a12a700db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6b:74:29:3c:61:4a:90:f8:a7:df:bc:fa:7b:
ba:03:de:b1:fd:99:32:df:d6:36:6c:99:68:33:9c:
1d:df:b7:5c:81:a4:7a:90:58:4c:06:82:be:5c:4d:
13:65:7b:96:6d:86:1c:7d:da:d3:73:e1:0e:8f:e2:
27:c7:cc:21:0e:5a:81:e3:d7:a6:c6:b4:b5:b8:1e:
44:96:58:66:52:15:c9:2a:c7:25:07:75:32:98:59:
6a:12:b0:17:be:2e:ed:04:ae:9a:57:57:48:3a:0c:
10:53:18:c6:39:8b:8e:18:41:78:2e:e6:9a:97:48:
a2:6c:36:bc:f9:21:57:e7:f3:19:3f:ab:16:8b:08:
21:c2:35:4b:47:b4:59:39:f1:68:36:1d:12:8e:77:
83:5c:72:30:0f:a4:52:c7:64:61:10:fe:a6:af:23:
9e:9c:17:c4:0c:b3:6b:c8:a5:9d:f5:8c:5a:3f:8e:
73:53:52:a7:2a:16:72:cc:54:e9:49:df:48:8e:f1:
fb:4b:e4:c6:82:6a:12:fa:96:6f:7c:e3:f0:a1:31:
11:77:9d:ee:3f:35:11:28:68:ba:0e:6e:28:b7:35:
66:34:5c:96:b1:0c:08:80:a6:1c:dc:98:7c:9b:34:
51:46:a4:18:7c:d3:9d:a2:7d:4b:53:c6:70:3b:b1:
2a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:64:6C:82:73:40:4D:17:6C:65:BC:BC:1D:9C:67:1A:12:A7:00:DB
X509v3 Authority Key Identifier:
keyid:AE:52:DB:82:09:0B:34:3F:89:F7:C6:37:CF:41:A9:4B:CF:D4:34:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlLbggkLND-J98Y3z0GpS8_UNGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/k2RsgnNATRdsZby8HZxnGhKnANs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/bcf167-b618-48d3-9a4e-d7b6063dca37/1/rlLbggkLND-J98Y3z0GpS8_UNGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.184.62.0/23
Signature Algorithm: sha256WithRSAEncryption
89:c2:0c:d9:a0:d4:d6:a2:95:88:b0:6d:9b:0b:c9:cf:d2:ba:
d3:34:d5:ed:aa:9e:7a:0d:90:91:38:4f:10:97:47:c1:5d:1b:
15:3a:95:2a:f2:66:61:38:3b:02:09:21:17:96:d1:dc:d7:dd:
75:a0:e1:51:66:78:8e:29:50:30:34:8c:bc:50:11:f4:4e:6b:
4d:17:37:93:1a:8e:0e:68:fc:7a:77:c3:d1:ab:18:0c:00:01:
4f:6f:eb:4a:50:0e:3d:b0:70:f7:27:3d:09:3a:0f:c7:52:08:
2f:53:a5:5a:3d:85:ca:f1:62:38:c7:34:7d:90:de:a5:63:3d:
e1:94:e7:c1:11:b7:22:42:36:20:f4:15:89:9a:9a:41:6f:77:
48:d7:e0:0a:c4:6b:46:ca:c4:96:9e:f5:a3:68:1c:bf:cb:29:
ab:f0:61:7c:e5:51:2c:2e:c1:d2:35:2c:4c:4f:8d:96:a2:b6:
e3:03:28:bc:06:12:57:68:7f:d1:3a:39:87:b8:c8:f4:de:55:
c3:36:5f:a2:a5:9b:a5:54:b9:63:21:f7:9b:8e:4a:e8:4f:18:
60:29:cf:1b:cd:ac:46:b9:dc:21:e1:58:46:89:8d:df:f7:e8:
ba:e3:3d:80:18:0c:6b:d0:c9:55:92:3a:65:d3:0a:44:85:95:
ed:0e:bc:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZnkCel0/1V4zCjhAnjkpuVYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNTJkYjgyMDkwYjM0M2Y4OWY3YzYzN2NmNDFhOTRiY2Zk
NDM0NmEwHhcNMjUxMDE0MTg0NDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzY0NmM4MjczNDA0ZDE3NmM2NWJjYmMxZDljNjcxYTEyYTcwMGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmt0KTxhSpD4p9+8+nu6A96x/Zky
39Y2bJloM5wd37dcgaR6kFhMBoK+XE0TZXuWbYYcfdrTc+EOj+Inx8whDlqB49em
xrS1uB5EllhmUhXJKsclB3UymFlqErAXvi7tBK6aV1dIOgwQUxjGOYuOGEF4Luaa
l0iibDa8+SFX5/MZP6sWiwghwjVLR7RZOfFoNh0SjneDXHIwD6RSx2RhEP6mryOe
nBfEDLNryKWd9YxaP45zU1KnKhZyzFTpSd9IjvH7S+TGgmoS+pZvfOPwoTERd53u
PzURKGi6Dm4otzVmNFyWsQwIgKYc3Jh8mzRRRqQYfNOdon1LU8ZwO7EqewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJNkbIJzQE0XbGW8vB2cZxoSpwDbMB8GA1UdIwQY
MBaAFK5S24IJCzQ/iffGN89BqUvP1DRqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmxMYmdna0xORC1KOThZM3owR3BTOF9VTkdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iY2YxNjctYjYxOC00OGQzLTlhNGUt
ZDdiNjA2M2RjYTM3LzEvazJSc2duTkFUUmRzWmJ5OEhaeG5HaEtuQU5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iY2YxNjctYjYxOC00OGQzLTlhNGUtZDdiNjA2M2RjYTM3
LzEvcmxMYmdna0xORC1KOThZM3owR3BTOF9VTkdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBubg+MA0G
CSqGSIb3DQEBCwUAA4IBAQCJwgzZoNTWopWIsG2bC8nP0rrTNNXtqp56DZCROE8Q
l0fBXRsVOpUq8mZhODsCCSEXltHc1911oOFRZniOKVAwNIy8UBH0TmtNFzeTGo4O
aPx6d8PRqxgMAAFPb+tKUA49sHD3Jz0JOg/HUggvU6VaPYXK8WI4xzR9kN6lYz3h
lOfBEbciQjYg9BWJmppBb3dI1+AKxGtGysSWnvWjaBy/yymr8GF85VEsLsHSNSxM
T42WorbjAyi8BhJXaH/ROjmHuMj03lXDNl+ipZulVLljIfebjkroTxhgKc8bzaxG
udwh4VhGiY3f9+i64z2AGAxr0MlVkjpl0wpEhZXtDrxf
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:24:16 2025 by rpki-client